Microsoft Patch Tuesday — September 2019
Tuesday, 10 September 2019
- Vulnerabilities
- 79
- Critical
- 0
- High
- 10
- Zero-days
- 0
- Public exploit
- 6
Exploited 4
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 8.8
CVE-2019-1297 Exploited A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 22%
-
High 7.8
CVE-2019-1215 Exploited Public exploit An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerabili…EPSS 19%
-
High 7.8
CVE-2019-1253 Exploited Public exploit An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker …EPSS 12%
-
High 7.8
CVE-2019-1214 Exploited An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common …EPSS 1.4%
Public exploit code 4
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2019-1244 Public exploit An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner…EPSS 12%
-
Unscored
CVE-2019-1245 Public exploit An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner…EPSS 13%
-
Unscored
CVE-2019-1262 Public exploit A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 3%
-
Unscored
CVE-2019-1221 Public exploit A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 19%
All vulnerabilities 79
High10 ShowHide
-
High 8.8
CVE-2019-1297 Exploited A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 22%
-
High 7.8
CVE-2019-1215 Exploited Public exploit An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerabili…EPSS 19%
-
High 7.8
CVE-2019-1253 Exploited Public exploit An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker …EPSS 12%
-
High 7.8
CVE-2019-1214 Exploited An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common …EPSS 1.4%
- High 7.5 EPSS 8.7%
- High 7.5 EPSS 8.7%
- High 7.5 EPSS 8.7%
- High 7.5 EPSS 8.7%
- High 7.5 EPSS 8.7%
- High 7.5 EPSS 5.4%
Medium1 ShowHide
- Medium EPSS 4.8%
Unscored68 ShowHide
-
Unscored
CVE-2019-1244 Public exploit An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner…EPSS 12%
-
Unscored
CVE-2019-1245 Public exploit An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner…EPSS 13%
-
Unscored
CVE-2019-1262 Public exploit A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 3%
-
Unscored
CVE-2019-1221 Public exploit A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 19%
-
Unscored
CVE-2019-0787 A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote…EPSS 12%
-
Unscored
CVE-2019-0788 A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote…EPSS 12%
-
Unscored
CVE-2019-0928 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s…EPSS 1.7%
-
Unscored
CVE-2019-1142 An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Fra…EPSS 1%
-
Unscored
CVE-2019-1208 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 13%
-
Unscored
CVE-2019-1209 An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.EPSS 6.2%
-
Unscored
CVE-2019-1216 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.EPSS 1.7%
-
Unscored
CVE-2019-1219 An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Info…EPSS 1.7%
-
Unscored
CVE-2019-1220 A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft…EPSS 3.8%
-
Unscored
CVE-2019-1231 An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerab…EPSS 2.3%
- Unscored
-
Unscored
CVE-2019-1233 A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exc…EPSS 6.2%
- Unscored
-
Unscored
CVE-2019-1236 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.5%
-
Unscored
CVE-2019-1240 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2019-1241 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 17%
-
Unscored
CVE-2019-1242 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2019-1243 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 18%
-
Unscored
CVE-2019-1246 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 13%
-
Unscored
CVE-2019-1247 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2019-1248 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2019-1249 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2019-1250 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 18%
-
Unscored
CVE-2019-1251 An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner…EPSS 1.7%
-
Unscored
CVE-2019-1252 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 60%
-
Unscored
CVE-2019-1254 An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerabil…EPSS 1.3%
-
Unscored
CVE-2019-1256 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…EPSS 1%
-
Unscored
CVE-2019-1257 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso…EPSS 12%
-
Unscored
CVE-2019-1259 A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery …EPSS 1.5%
-
Unscored
CVE-2019-1260 An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.EPSS 2.6%
-
Unscored
CVE-2019-1261 A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery …EPSS 1.6%
-
Unscored
CVE-2019-1263 An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur…EPSS 7.8%
-
Unscored
CVE-2019-1264 A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'.EPSS 3.8%
-
Unscored
CVE-2019-1265 A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker …EPSS 3.4%
-
Unscored
CVE-2019-1266 A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing…EPSS 2%
-
Unscored
CVE-2019-1267 An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symboli…EPSS 1.2%
-
Unscored
CVE-2019-1268 An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'.EPSS 1%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2019-1272 An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully explo…EPSS 1%
-
Unscored
CVE-2019-1273 A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Acti…EPSS 1.5%
-
Unscored
CVE-2019-1274 An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur…EPSS 1.3%
- Unscored
-
Unscored
CVE-2019-1278 An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. …EPSS 1.1%
-
Unscored
CVE-2019-1280 A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successful…EPSS 19%
-
Unscored
CVE-2019-1282 An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log F…EPSS 1.3%
-
Unscored
CVE-2019-1283 An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Infor…EPSS 1.6%
- Unscored
- Unscored
-
Unscored
CVE-2019-1286 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 5.8%
- Unscored
- Unscored
-
Unscored
CVE-2019-1290 A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote…EPSS 12%
-
Unscored
CVE-2019-1291 A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote…EPSS 12%
-
Unscored
CVE-2019-1292 A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 5.1%
-
Unscored
CVE-2019-1293 An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windo…EPSS 2.1%
-
Unscored
CVE-2019-1294 A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot Security Feature Byp…EPSS 1.3%
-
Unscored
CVE-2019-1295 A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem…EPSS 8.3%
-
Unscored
CVE-2019-1296 A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem…EPSS 8.3%
-
Unscored
CVE-2019-1299 An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H…EPSS 5.8%
-
Unscored
CVE-2019-1303 An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker …EPSS 1.2%
-
Unscored
CVE-2019-1305 A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross…EPSS 1.5%
-
Unscored
CVE-2019-1306 A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps…EPSS 17%